Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 9 replies
  • Subscribers 1 subscriber
  • Views 4837 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

VPN site to site UNC path problem

raid
Hi,

I have sucess connect using site to site refering on http://docs.astaro.org/howtos/ IPSec_Net2Net_VPN_RSA_Guidebook.pdf
Problem that i can ping remote pc (192.168.1.1) w2k but i can connect using unc path with ip address. ex: \192.168.1.1\c$.  Base on the how to doi need to open something?

Tks/raid [:S]


This thread was automatically locked due to age.
Parents
  • 0
    BTW, looking at the packetfilter live log would show you what traffic is trying to get through but is blocked.

    Barry
  • 0 in reply to BarryG
    Hi,

    Thank for reply.
    Yes when i cehck the packetfilter live log they was UDP 137 and 138 is blocked but i have a packet filter rule from internal network to remote network with any service allow. Same with the remote site. 

    Is this not enoungh? Do i need to create something?
    Pls help.

    Tks
  • 0 in reply to raid
    Are you part of an Active Directory?
    Are you running a DNS server or WINS server at either LAN?

    Without either of these, the practical solution will be to add the entry to your LMhosts.
  • 0 in reply to SecApp
    Hi,

    No, I mean just using ip address \192.168.1.1\c$, this do not rquire
    any wins, dns or lmhost. I have hardware firewall / MS VPN but they can just connect by ip address on vpn tunnel. Do astaro are not that waay the vpn tunnel is?

    tks
  • 0 in reply to raid
    Post your blocked log entry...
  • 0 in reply to SecApp
    HI,

    Sorry for late reply, Because i have redo the setup, but still the same.
                                       ( HQ )                                           (Branch)
    172.19.1.0(Lan)--->192.168.60.200(ext)=====(ext)192.168.60.201
  • 0 in reply to raid
    Hi,

    I have found the problem, I need to create a packet filter Rule to allow remote network to local network. It work and now i can unc with ip.
    Because Astaro is very confuse on the ping. On many enterprise firewall we use ping to trouble shoot but in astaro you can ping when is connected even you are not able to connect remote site. If you turn the icmp to disable then everything cannot be ping. I thing this linux way. 

    Tks
  • 0 in reply to raid
    IIRC, you CAN ping if ICMP is disabled AND you have appropriate PF rules.

    Barry
Reply Children
No Data
Cookie Information Banner